This vulnerability is a race condition in the mobile version of Google Chrome on iOS platforms before version 153.0.8010.36. It enables a remote attacker to bypass the web origin policy by leveraging social engineering techniques and a specially crafted HTML page. The web origin policy is a critical security mechanism that restricts how documents or scripts loaded from one origin can interact with resources from another origin. The flaw is identified as CWE-367 (Time-of-check Time-of-use (TOCTOU) race condition). No official patch or remediation details are available in the provided data.

Successful exploitation could allow an attacker to bypass the web origin policy, potentially leading to unauthorized access to web resources or data that should be isolated by origin boundaries. This could facilitate cross-origin attacks or data leakage in the affected browser environment. However, no known exploits in the wild have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Users and administrators should monitor official Google Chrome security advisories for updates and apply the patch once it becomes available. Until then, exercising caution with untrusted web content and social engineering attempts is advised.